Security and Cloud, page 5
AI App Exposes User Photos and Risks Supply-Chain Attacks — How Hardcoded Keys Broke Trust
Trend Research discovered that the AI photo-editing app Wondershare RepairIt stored thousands of user images in an unsecured cloud bucket and embedded overly permissive access credentials inside its binary. That mistake exposed private photos and downloadable AI models — a dangerous combination that can enable model tampering and software supply-chain attacks. The issues were reported […]
European cybersecurity agency ENISA confirmed the incident is a ransomware attack on Collins Aerospace.
For the fourth day running, European airports are still dealing with knock-on effects from a ransomware attack that targeted Collins Aerospace, a vendor that supplies check-in and boarding systems. The outage forced airlines and airports to revert to manual processes and has left thousands of passengers facing long queues and delayed flights. The attack impacts […]
EU Puts Big Tech on Notice: Are Apple, Google, and Microsoft Doing Enough to Stop Scams?
Online scams are a massive problem, costing people billions of euros every year. Now, the European Union is stepping in and putting some of the biggest names in tech—Apple, Google, and Microsoft—on blast. The EU is formally questioning these tech giants, along with travel platform Booking Holdings, to see if they’re doing enough to combat […]
How a New DDoS Botnet is Letting Anyone Be a Hacker
A dangerous new trend is emerging in the world of cybercrime. Instead of a single group of hackers launching attacks, a sophisticated new Distributed Denial of Service (DDoS) botnet, dubbed ShadowV2, is turning the tables. It’s offering a “DDoS-as-a-service” platform, letting even non-technical users rent access to a network of hijacked computers to launch their […]
The Digital Crime Wave: How Nigerian Criminals Are Using Tech to Outsmart Security
Hold up. We all know technology has revolutionized our lives, but what about its darker side? According to Nigeria’s Inspector-General of Police (IGP), Kayode Egbetokun, criminal syndicates in the country aren’t just adapting to the digital age—they’re fully embracing it. This isn’t just a local issue; it’s a stark example of a global trend where […]
Why Your Code Just Got a Security Upgrade: GitHub’s New 2FA and Token Rules
Wait, did you hear? The world’s largest open-source development platform is making some big moves to lock down its security. In a direct response to a recent wave of supply chain attacks—including a particularly nasty one dubbed “Shai-Hulud”—GitHub is rolling out new, stricter authentication rules. If you’re a developer or anyone who uses code from […]
AI SOC vs. Traditional SOC: Which Cybersecurity Strategy Wins in 2025?
Cybersecurity is evolving at lightning speed, and so are the threats. With rising attack volumes, false positives, and increasingly sophisticated adversaries, organizations are asking a crucial question: Should we stick with a traditional Security Operations Center (SOC) or embrace an AI-powered SOC? The answer isn’t straightforward—but understanding the strengths and weaknesses of both approaches will […]
BadIIS Malware Campaign Uses SEO Poisoning to Spread Across Asia
Cybercriminals are getting more creative—and more dangerous—with how they manipulate search engines. A newly uncovered campaign, Operation Rewrite, is leveraging a malware called BadIIS to poison search engine results, hijack web traffic, and install persistent backdoors on compromised servers. Targeting East and Southeast Asia, especially Vietnam, this campaign highlights the growing weaponization of SEO poisoning […]
ShadowLeak: Radware Uncovers Zero-Click Flaw in ChatGPT’s Deep Research Agent
AI is transforming how businesses handle sensitive data—but a new discovery shows it may also be creating invisible risks. Security researchers at Radware have uncovered a critical zero-click vulnerability, dubbed “ShadowLeak”, in OpenAI’s ChatGPT Deep Research agent. The flaw highlights a growing concern: autonomous AI agents may be powerful, but they’re also potential gateways for […]
20 Billion Reasons to Be Alarmed: A Massive NPM Supply Chain Attack Is Stealing Crypto
It’s an open secret in the tech world: a single compromised developer account can have a catastrophic domino effect. This week, that worst-case scenario became a reality when a supply chain attack on the popular package manager npm affected over 20 widely used packages, which collectively boast a staggering 2 billion weekly downloads. What makes […]
Firmware Security: Why It’s Your PC’s Biggest Weakness (And How to Fix It)
We spend so much time worrying about viruses, phishing scams, and ransomware, but what about the one thing that connects your computer’s brain to its body? We’re talking about firmware, the low-level software that lives on your hardware. It’s the silent, powerful engine that makes everything run, but its deep-rooted access is also what makes […]
From RATs to AI: How New Malware Blends Old Tricks with Next-Gen Threats
It’s a classic tale of new tricks and old dogs. Recent reports from cybersecurity researchers are shining a light on how cybercriminals are blending advanced, highly technical exploits with simple, deceptive social engineering. The result? Sophisticated new threats like MostereRAT and novel takes on the ClickFix scam, both designed to steal your data and bypass […]